From 8f46ae619c98553b6dcc5b2768144e88fb8a34bd Mon Sep 17 00:00:00 2001 From: Petr Skoda Date: Thu, 2 Sep 2010 12:19:08 +0000 Subject: [PATCH] MDL-24058 fixed potential XSS --- .../3.3.8/plugins/spellchecker/classes/SpellChecker.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/editor/tinymce/tiny_mce/3.3.8/plugins/spellchecker/classes/SpellChecker.php b/lib/editor/tinymce/tiny_mce/3.3.8/plugins/spellchecker/classes/SpellChecker.php index bba6e29ad60..7b298a30c68 100644 --- a/lib/editor/tinymce/tiny_mce/3.3.8/plugins/spellchecker/classes/SpellChecker.php +++ b/lib/editor/tinymce/tiny_mce/3.3.8/plugins/spellchecker/classes/SpellChecker.php @@ -20,7 +20,7 @@ class SpellChecker { * Simple loopback function everything that gets in will be send back. * * @param $args.. Arguments. - * @return {Array} Array of all input arguments. + * @return {Array} Array of all input arguments. */ function &loopback(/* args.. */) { return func_get_args(); @@ -54,7 +54,7 @@ class SpellChecker { * @param {String} $str Message to send back to user. */ function throwError($str) { - die('{"result":null,"id":null,"error":{"errstr":"' . addslashes($str) . '","errfile":"","errline":null,"errcontext":"","level":"FATAL"}}'); + die('{"result":null,"id":null,"error":{"errstr":"' . addslashes_js($str) . '","errfile":"","errline":null,"errcontext":"","level":"FATAL"}}'); } }